---
title: Authenticating Users for Access Server | OpenVPN
canonical: https://openvpn.net/as-docs/v3/authenticating/
product: Access Server Docs
description: 'Access Server supports multiple user authentication methods: local, LDAP, RADIUS, SAML, and PAM.'
---

# Authenticating Users for Access Server | OpenVPN

Access Server supports five user authentication methods:

1. [Local](https://openvpn.net/as-docs/v3/local.md)
2. [LDAP](https://openvpn.net/as-docs/v3/ldap.md)
3. [RADIUS](https://openvpn.net/as-docs/v3/radius.md)
4. [SAML](https://openvpn.net/as-docs/v3/saml.md)
5. [PAM](https://openvpn.net/as-docs/v3/pam.md)

You can configure local, LDAP, RADIUS, and SAML authentication methods from the Admin Web UI. From the command line, you use the **auth.module.type** configuration key. Refer to the appropriate tutorials below.

Access Server supports multiple authentication methods. Refer to [Authentication System](https://openvpn.net/as-docs/v3/user-authentication-system.md).

- [Tutorial: How to Change the Authentication Mode in the Admin Web UI](https://openvpn.net/as-docs/v3/tutorials/tutorial--change-auth-mode-admin-web-ui.md)
- [Tutorial: How to Change the Authentication Mode in the Command-Line Interface](https://openvpn.net/as-docs/v3/tutorials/tutorial--change-auth-mode-cli.md)

## Local

- [Tutorial: How to Use Local User Authentication](https://openvpn.net/as-docs/v3/tutorials/tutorial--local-auth.md)
- [Tutorial: Manage the Local Authentication Method from the Command-Line Interface](https://openvpn.net/as-docs/v3/tutorials/tutorial--local-auth-command-line.md)
- [Tutorial: Allow Users to Change Passwords from the Client Web UI](https://openvpn.net/as-docs/v3/tutorials/tutorial--user-password-change-cws.md)
- [Tutorial: Adding Users to Access Server](https://openvpn.net/as-docs/v3/tutorials/tutorial--adding-users.md)

## LDAP

- [Tutorial: Integrate Access Server with JumpCloud using LDAP](https://openvpn.net/as-docs/v3/tutorials/tutorial--jumpcloud-ldap.md)
- [Tutorial: Integrate Okta with Access Server via LDAP](https://openvpn.net/as-docs/v3/tutorials/tutorial--okta-ldap.md)
- [Tutorial: Configure Google Secure LDAP with Access Server](https://openvpn.net/as-docs/v3/tutorials/tutorial--google-secure-ldap.md)
- [Tutorial: Set up Access Server with Active Directory via LDAP](https://openvpn.net/as-docs/v3/tutorials/tutorial--active-directory-ldap.md)
- [Tutorial: Manage the LDAP Authentication Method from the Command-line Interface](https://openvpn.net/as-docs/v3/tutorials/tutorial--ldap-command-line.md)

## RADIUS

- [Tutorial: Configure JumpCloud with Access Server via RADIUS](https://openvpn.net/as-docs/v3/tutorials/tutorial--jumpcloud-radius.md)
- [Tutorial: Configure Active Directory (Windows Server) RADIUS Protocol for Access Server](https://openvpn.net/as-docs/v3/tutorials/tutorial--microsoft-ad-radius.md)
- [Tutorial: Integrate Okta with Access Server via RADIUS](https://openvpn.net/as-docs/v3/tutorials/tutorial--okta-radius.md)
- [Tutorial: Manage the RADIUS Authentication Method from the Command-line Interface](https://openvpn.net/as-docs/v3/tutorials/tutorial--radius-command-line.md)

## SAML

- [Tutorial: How to Configure SAML with Entra ID](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-entra-id.md)
- [Tutorial: How to Configure SAML with Google Workspace](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-google-workspace.md)
- [Tutorial: How to Configure SAML with OneLogin](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-onelogin.md)
- [Tutorial: How to Configure SAML with Keycloak](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-keycloak.md)
- [Tutorial: How to Configure SAML with Okta](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-okta.md)
- [Tutorial: How to Configure SAML with JumpCloud](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-jumpcloud.md)
- [Tutorial: How to Configure SAML with AWS](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-aws.md)
- [Tutorial: How to Configure SAML with Auth0](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-auth0.md)
- [Tutorial: How to Configure SAML with PingOne SSO](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-pingone.md)
- [Tutorial: How to Configure SAML with PingFederate SSO](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-pingfederate-sso.md)

- [Tutorial: Manage the SAML Authentication Method from the Command-line Interface](https://openvpn.net/as-docs/v3/tutorials/tutorial--saml-command-line.md)

## PAM

- [Tutorial: How to Add Users to Your Access Server Using PAM](https://openvpn.net/as-docs/v3/tutorials/tutorial--pam-authentication-users.md)
- [Tutorial: Manage the PAM Authentication Method from the Command-line Interface](https://openvpn.net/as-docs/v3/tutorials/tutorial--pam-command-line.md)

## Custom authentication

- [Tutorial: Create a Custom Authentication System with a Python Script](https://openvpn.net/as-docs/v3/tutorials/tutorial--custom-authentication-system.md)
- [Tutorial: How to Set Up Hardware Address Checking with a Post-auth Script](https://openvpn.net/as-docs/v3/tutorials/tutorial--hardware-address-post-auth.md)
- [Tutorial: Restrict by IP address with the Post-auth IP Restrict Script](https://openvpn.net/as-docs/v3/tutorials/tutorial--post-auth-ip-restrict.md)
- [Tutorial: Add Duo Two-Factor Authentication to Access Server](https://openvpn.net/as-docs/v3/tutorials/tutorial--duo-post-auth.md)
- [Tutorial: How to Set Up LDAP Group Mapping with a Post-auth Script](https://openvpn.net/as-docs/v3/tutorials/tutorial--post-auth-ldap-group-mapping.md)
- [Tutorial: How to Set Up RADIUS Group Mapping with a Post-auth Script](https://openvpn.net/as-docs/v3/tutorials/tutorial--post-auth-radius-group-mapping.md)
- [Tutorial: How to Set Up SAML Group Mapping with a Post-auth Script](https://openvpn.net/as-docs/v3/tutorials/tutorial--post-auth-saml-group-mapping.md)
- [Tutorial: How to Install a Post-auth Script](https://openvpn.net/as-docs/v3/tutorials/tutorial--install-post-auth-script.md)
- [Tutorial: How to Remove a Post-auth Script](https://openvpn.net/as-docs/v3/tutorials/tutorial--remove-post-auth-script.md)

## In this section:

- [Authentication System](https://openvpn.net/as-docs/v3/user-authentication-system.md)
- [Local](https://openvpn.net/as-docs/v3/local.md)
- [LDAP](https://openvpn.net/as-docs/v3/ldap.md)
- [RADIUS](https://openvpn.net/as-docs/v3/radius.md)
- [SAML](https://openvpn.net/as-docs/v3/saml.md)
- [PAM](https://openvpn.net/as-docs/v3/pam.md)
- [TOTP MFA](https://openvpn.net/as-docs/v3/totp-mfa.md)
- [Integrations](https://openvpn.net/as-docs/v3/integrations.md)

---

Prev: [External Public Key Infrastructure](https://openvpn.net/as-docs/v3/external-public-key-infrastructure.md)
Next: [Authentication System](https://openvpn.net/as-docs/v3/user-authentication-system.md)
Index: https://openvpn.net/as-docs/llms.txt